Firezone is a self-hosted VPN server and Linux firewall

• Manage remote access through an intuitive web interface and CLI utility.
• Deploy on your own infrastructure to keep control of your network traffic.
• Built on WireGuard® to be stable, performant, and lightweight.

Get Started

Follow our deploy guide to install your self-hosted instance of Firezone.

Or, if you're on a supported platform, try our one-line install script:

bash <(curl -Ls https://github.com/firezone/firezone/raw/master/scripts/install.sh)

Using Firezone for your team? Take a look at our business tier.

Features

• Fast: Uses WireGuard® to be 3-4 times faster than OpenVPN.
• SSO Integration: Authenticate using any identity provider with an OpenID Connect (OIDC) connector.
• No dependencies: All dependencies are bundled thanks to Chef Omnibus.
• Simple: Takes minutes to set up. Manage via a simple CLI.
• Secure: Runs unprivileged. HTTPS enforced. Encrypted cookies.
• Firewall included: Uses Linux nftables to block unwanted egress traffic.

Anti-features

Firezone is not:

• An inbound firewall
• A tool for creating mesh networks
• A full-featured router
• An IPSec or OpenVPN server

Documentation

Additional documentation on general usage, troubleshooting, and configuration can be found at https://docs.firezone.dev.

Get Help

If you're looking for help installing and configuring Firezone, we're happy to help:

• Discussion Forums: ask questions, report bugs, and suggest features
• Community Slack: join discussions, meet other users, and meet the contributors
• Email Us: we're always happy to chat

Developing and Contributing

See CONTRIBUTING.md.

Security

See SECURITY.md.

License

See LICENSE.

WireGuard® is a registered trademark of Jason A. Donenfeld.